Method and system for calling line authentication

Abstract

A calling line authentication system and method are disclosed. The system comprises a communication network and a key server. The communication network receives a telephone number signal from a calling source attempting to access a secured service of a calling destination. The communication network identifies a directory number representative of the calling source and provides an authentication key to the key server when the directory number is one of a list of authorized directory numbers stored within the communication network. The key server provides the authentication key to the calling destination as an indication that the calling source has authorization for access to the secured service.

We claim  
     
         1 . A method of granting access to a secured service provided by a calling destination, comprising: 
 receiving a telephone number signal from a calling source, said telephone number signal indicating the calling destination;    identifying a directory number corresponding to said calling source;    determining if said calling source has authorization to the secured service provided by the calling destination; and    retrieving an authentication key when said calling source has authorization to the secured service.    
     
     
         2 . The method of  claim 1 , further comprising: 
 providing said authentication key to the calling destination.    
     
     
         3 . A computer-useable medium storing a computer program product for use in a communications network, said computer program product comprising: 
 computer-readable code for receiving a telephone number signal from a calling source, said telephone number signal indicating a calling destination;    computer-readable code for identifying a directory number corresponding to said calling source;    computer-readable code for determining if said calling source has authorization to a secured service provided by said calling destination; and    computer-readable code for retrieving an authentication key when said calling source has authorization to a secured service provided by said calling destination.    
     
     
         4 . The compute-useable medium of  claim 3 , further comprising: 
 computer readable code for providing said authentication key to a server in communication with said calling destination.    
     
     
         5 . A method for operating a communication network, comprising: 
 providing a trigger to a switch, said trigger indicating an attempt by a calling source to establish a communication link with a calling destination;    operating said switch to provide a query to a service control point in response to said trigger, said query including an authorization to establish said communication link between said calling source and said calling destination;    operating said service control point to retrieve an authentication key from a database in response to said query when a directory number corresponding to said calling source is stored within said database.    
     
     
         6 . The method of  claim 5 , further comprising: 
 operating said service control point to provide said authentication key to a server in communication with said calling destination.    
     
     
         7 . The method of  claim 6 , further comprising: 
 operating said server to provide said authentication key to said calling destination.    
     
     
         8 . The method of  claim 6 , further comprising: 
 operating said service control point to remove said authentication key from said server.    
     
     
         9 . A communication network, comprising: 
 a switch operable to receive a trigger indicating an attempt by a calling source to establish a communication link with a calling destination;    a service control point; and    a database operable to store a set of authorized directory numbers and an authentication key, wherein 
 said switch is further operable to provide a query to said service control point in response to said trigger, said query including an authorization to establish said communication link between said calling source and said calling destination,  
 said service control point is operable to retrieve said authentication key from said database in response to said query when a directory number corresponding to said calling source is listed within said set of authorized directory numbers as stored within said database.  
   
     
     
         42 . The communication network of  claim 9 , wherein 
 said service control point is further operable to provide said authentication key to a server in communication with said calling destination.    
     
     
         11 . The communication network of  claim 42 , wherein: 
 said service control point is further operable to remove said authentication key from said server after said server provide said authentication key to said calling destination.    
     
     
         12 . A method of operating a communication network, comprising: 
 operating a calling source to provide a telephone number signal to a communication network, said telephone number signal representative of a calling destination;    operating said communication network to determine if a directory number corresponding to said calling source is listed within a set of authorized directory numbers stored within said communication network; and    operating said communication network to provide an authentication key to a server in communication with said calling destination when said directory number is listed within said set of authorized directory numbers.    
     
     
         44 . The method of  claim 12 , further comprising: 
 operating said server to provide said authentication key to said calling destination.    
     
     
         14 . The method of  claim 44 , further comprising: 
 operating said communication network to establish a communication link between said calling source and said calling destination; and    operating said calling destination to provide said authentication key to said calling source.    
     
     
         15 . The method of  claim 44 , further comprising: 
 operating said communication network to remove said authentication key from said communication network after providing said authentication key to said server.    
     
     
         16 . A system, comprising: 
 a calling source;    a calling destination;    a communication network in communication with said calling source and said calling destination; and    a server in communication with said calling destination and said communication network, wherein 
 said calling source is operable to provide a telephone signal to said communication network, said telephone number being representative of said calling destination,  
 said communication network is operable to determine if a directory number corresponding to said calling source is listed within a set of authorized directory numbers stored within said communication network, and  
 said communication network is further operable to provide an authentication key to said server when said directory number is listed within said set of authorized directory numbers.  
   
     
     
         17 . The system of  claim 16 , wherein 
 said server is operable to provide said authentication key to said calling destination.    
     
     
         18 . The system of  claim 17 , wherein 
 said communication network is further operable to establish a communication link between said calling source and said calling destination in response to said telephone number signal; and    said calling destination is operable to provide said authentication key through said communication link to said calling source.    
     
     
         19 . The system of  claim 16 , wherein 
 said communication network is further operable to remove said authentication key from said communication network after providing said authentication key to said server.    
     
     
         45 . The system of  claim 16 , wherein 
 said calling source is a client workstation;    said calling destination is an Internet server; and    said communication network includes an advanced intelligent network.